Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ABA61DCCF3311EF98861EBC762E951A.roa
File: 9ABA61DCCF3311EF98861EBC762E951A.roa (raw, json)
Hash identifier: 5IANxGeg0X3JlUAsSJRcY2SabQrv4IBuD9OmlhhlCXE=
Subject key identifier: D5:8F:CF:54:30:FC:AF:F2:ED:BE:46:8E:71:8B:13:A0:A6:AB:04:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ABA61DCCF3311EF98861EBC762E951A.roa
Signing time: Fri 10 Jan 2025 09:16:42 +0000
ROA not before: Fri 10 Jan 2025 09:16:38 +0000
ROA not after: Fri 07 Feb 2025 09:16:38 +0000
asID: 5065
IP address blocks: 154.94.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80347 (0x139db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 09:16:38 2025 GMT
Not After : Feb 7 09:16:38 2025 GMT
Subject: CN=6780e57a-89a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:0d:60:43:7e:3e:aa:29:aa:30:44:33:00:
5a:c1:1c:7d:88:f1:8e:9b:0a:e7:48:0a:5a:e4:ac:
09:f4:ee:a1:d6:8c:51:88:c0:b3:02:50:e1:e0:45:
42:80:2b:6b:11:33:48:43:b8:00:89:6d:d6:59:56:
18:66:2b:13:14:40:c7:21:42:9e:66:8c:fb:00:d9:
06:cd:15:03:a4:dd:9e:92:53:68:d5:62:2c:6a:e7:
e5:fc:0c:53:95:eb:e0:3c:14:e5:4e:7b:77:5c:67:
d1:59:50:60:3b:8d:ea:19:61:d8:6e:dd:8d:b8:e5:
06:06:fe:14:24:21:48:6c:56:db:23:bd:0d:48:61:
4b:b3:d8:18:e9:b0:72:f5:2a:6a:9c:04:3c:ad:57:
cb:68:09:c9:17:51:7a:64:df:5d:93:bf:8e:a6:e6:
8f:17:3b:2c:fc:0c:4c:dc:53:5a:8e:1c:ba:4f:32:
69:30:67:8d:d4:9a:10:fd:60:07:8e:69:36:45:c9:
73:f4:46:3f:37:44:87:7c:83:ed:61:2a:f4:7a:22:
09:e6:8d:6a:d6:fa:27:ae:f0:f9:4f:4d:ce:d4:72:
41:bc:a1:ae:a1:ab:01:d6:4e:17:74:09:3c:bf:63:
a7:af:5b:18:03:51:ff:30:3f:7e:a5:d0:20:4e:f2:
28:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8F:CF:54:30:FC:AF:F2:ED:BE:46:8E:71:8B:13:A0:A6:AB:04:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ABA61DCCF3311EF98861EBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.44.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:1e:f8:47:9b:b1:21:97:c7:a3:26:0c:c8:05:73:c5:9a:6b:
9d:ec:ff:6a:47:f7:91:24:bf:b0:19:56:2d:8a:3e:00:5f:3a:
8e:ba:1f:ea:c6:09:14:bf:c9:f0:db:a0:bd:92:51:42:64:9b:
1e:17:69:77:fd:8f:80:4b:19:64:04:b0:fd:9f:22:1a:ab:8a:
42:72:bd:ca:23:87:31:bc:0b:c0:31:bd:c6:01:18:25:59:19:
58:2b:22:74:02:ac:ea:1c:3d:99:fe:99:89:a6:63:d8:8c:6e:
5a:df:3e:0e:3a:3d:4f:c3:61:c4:8c:04:3b:39:8b:44:7c:ef:
9a:41:c9:6d:9e:97:97:8e:c7:32:be:f3:c3:35:b9:cb:28:a9:
a8:9f:1e:df:0d:36:32:98:a9:1a:43:16:01:2b:cb:3c:50:a4:
45:32:36:f8:7b:cf:25:66:64:bc:30:b4:ca:c9:ff:06:b1:ff:
09:4b:51:6c:73:ca:3d:d2:62:30:f4:fd:cb:93:21:65:9a:b2:
b8:2e:ad:32:cc:f6:d3:f0:79:a8:e7:97:13:b2:c3:59:f2:9c:
83:b2:55:f1:cd:f3:fc:d3:8b:49:ba:4c:32:51:a6:7f:fb:d0:
5a:38:78:27:ba:b1:21:02:4e:ba:e2:75:c5:fc:7b:2f:3f:05:
3d:af:cd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:48:06 2025 by rpki-client